GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.

vendor_unpatched cve-2024-56737: Unpatched CVEs for Debian Linux (cve-2024-56737)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7b9adcd6ea advisory.

    fix CVE-2024-56737, CVE-2025-56737, CVE-2025-1864

    ----

    Fix CVE-2025-1744  and CVE-2025-1864



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f8eca89d63 advisory.

    fix CVE-2024-56737, CVE-2025-56737, CVE-2025-1864

    ----

    Fix CVE-2025-1744 and CVE-2025-1864

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2756 advisory.

    GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in     an HFS filesystem. (CVE-2024-56737)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-847 advisory.

    GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in     an HFS filesystem. (CVE-2024-56737)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0629-1 advisory.

    - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
    - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
    - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
    - CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
    - CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
    - CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
    - CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
    - CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
    - CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
    - CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
    - CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
    - CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
    - CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg .
    (bsc#1236317)
    - CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read     command.
      (bsc#1237012)
    - CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown     mode.
      (bsc#1237013)
    - CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in ufs.
      (bsc#1237002)
    - CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in reiserfs.
      (bsc#1237008)
    - CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in jfs.
      (bsc#1237009)
    - CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in romfs.
      (bsc#1237010)
    - CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution.
    (bsc#1237011)
    - CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
    - CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4.
    (bsc#1237006)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0607-1 advisory.

    - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
    - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
    - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
    - CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
    - CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
    - CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
    - CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
    - CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
    - CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
    - CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
    - CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
    - CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
    - CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg .
    (bsc#1236317)
    - CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read     command.
      (bsc#1237012)
    - CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown     mode.
      (bsc#1237013)
    - CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in ufs.
      (bsc#1237002)
    - CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in reiserfs.
      (bsc#1237008)
    - CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in jfs.
      (bsc#1237009)
    - CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in romfs.
      (bsc#1237010)
    - CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution.
    (bsc#1237011)
    - CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
    - CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4.
    (bsc#1237006)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0587-1 advisory.

    - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
    - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
    - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
    - CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
    - CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
    - CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
    - CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
    - CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
    - CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
    - CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
    - CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
    - CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
    - CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg .
    (bsc#1236317)
    - CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read     command.
      (bsc#1237012)
    - CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown     mode.
      (bsc#1237013)
    - CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in ufs.
      (bsc#1237002)
    - CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in reiserfs.
      (bsc#1237008)
    - CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in jfs.
      (bsc#1237009)
    - CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in romfs.
      (bsc#1237010)
    - CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution.
    (bsc#1237011)
    - CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
    - CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4.
    (bsc#1237006)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0586-1 advisory.

    - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
    - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
    - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
    - CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
    - CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
    - CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
    - CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
    - CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
    - CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
    - CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
    - CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
    - CVE-2024-49504: Fixed an issue that can bypass TPM-bound disk encryption on SL(E)M encrypted Images.
    (bsc#1229164)
    - CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
    - CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg .
    (bsc#1236317)
    - CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read     command.
      (bsc#1237012)
    - CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown     mode.
      (bsc#1237013)
    - CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in ufs.
      (bsc#1237002)
    - CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in reiserfs.
      (bsc#1237008)
    - CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in jfs.
      (bsc#1237009)
    - CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in romfs.
      (bsc#1237010)
    - CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution.
    (bsc#1237011)
    - CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
    - CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4.
    (bsc#1237006)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0588-1 advisory.

    - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
    - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
    - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
    - CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
    - CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
    - CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
    - CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
    - CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
    - CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
    - CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
    - CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
    - CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
    - CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg .
    (bsc#1236317)
    - CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read     command.
      (bsc#1237012)
    - CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown     mode.
      (bsc#1237013)
    - CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in ufs.
      (bsc#1237002)
    - CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in reiserfs.
      (bsc#1237008)
    - CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in jfs.
      (bsc#1237009)
    - CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in romfs.
      (bsc#1237010)
    - CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution.
    (bsc#1237011)
    - CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
    - CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4.
    (bsc#1237006)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
233025	Fedora 41 : radare2 (2025-7b9adcd6ea)	Nessus	Fedora Local Security Checks	critical
233011	Fedora 40 : radare2 (2025-f8eca89d63)	Nessus	Fedora Local Security Checks	critical
216810	Amazon Linux 2 : grub2 (ALAS-2025-2756)	Nessus	Amazon Linux Local Security Checks	high
216793	Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2025-847)	Nessus	Amazon Linux Local Security Checks	high
216662	SUSE SLES12 Security Update : grub2 (SUSE-SU-2025:0629-1)	Nessus	SuSE Local Security Checks	high
216650	SUSE SLES15 Security Update : grub2 (SUSE-SU-2025:0607-1)	Nessus	SuSE Local Security Checks	high
216518	SUSE SLES15 Security Update : grub2 (SUSE-SU-2025:0587-1)	Nessus	SuSE Local Security Checks	high
216517	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : grub2 (SUSE-SU-2025:0586-1)	Nessus	SuSE Local Security Checks	high
216508	SUSE SLES15 Security Update : grub2 (SUSE-SU-2025:0588-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-56737

high

Tenable Plugins

Coming Soon

critical

critical

high

high

high

high

high

high

high